Asymmetric denial of service In mqtt-packet
Description
Denial of Service in mqtt-packet
Versions of mqtt-packet prior to 3.4.6, or 4.x prior to 4.0.5 are affected by a denial of service vulnerability wherein specific sequences of MQTT packets can crash the application.
Recommendation
Version 3.x: Update to version 3.4.6 or later. Version 4.x: Update to version 4.0.5 or later.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 npm | 3.4.6, 4.0.5 |
Aliases
1. 2. 3. 4. 5.
References
1. 2. 3.